Re: [6tisch-security] bar bof at IETF101, Re: enrollment roadmap

peter van der Stok <stokcons@xs4all.nl> Mon, 29 January 2018 08:50 UTC

Return-Path: <stokcons@xs4all.nl>
X-Original-To: 6tisch-security@ietfa.amsl.com
Delivered-To: 6tisch-security@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B75213178E for <6tisch-security@ietfa.amsl.com>; Mon, 29 Jan 2018 00:50:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.92
X-Spam-Level:
X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dY8rPpvaUlfe for <6tisch-security@ietfa.amsl.com>; Mon, 29 Jan 2018 00:50:04 -0800 (PST)
Received: from lb1-smtp-cloud8.xs4all.net (lb1-smtp-cloud8.xs4all.net [194.109.24.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 679E412D7E3 for <6tisch-security@ietf.org>; Mon, 29 Jan 2018 00:48:32 -0800 (PST)
Received: from webmail.xs4all.nl ([IPv6:2001:888:0:22:194:109:20:215]) by smtp-cloud8.xs4all.net with ESMTPA id g571elqQiMhTXg571eos5X; Mon, 29 Jan 2018 09:48:30 +0100
Received: from AMontpellier-654-1-69-44.w90-0.abo.wanadoo.fr ([90.0.44.44]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Mon, 29 Jan 2018 09:48:23 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Mon, 29 Jan 2018 09:48:23 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: 6tisch-security@ietf.org
Cc: Eliot Lear <lear@cisco.com>, consultancy@vanderstok.org, Nancy Cam-Winget <ncamwing@cisco.com>, Kent Watsen <kwatsen@juniper.net>, Peter Beal <pbeal@cisco.com>, "Panos Kampanakis (pkampana)" <pkampana@cisco.com>, sandeep kumar <sandeep.kumar@philips.com>, max pritikin <pritikin@cisco.com>, =?UTF-8?Q?G=c3=b6ran_Selander?= <goran.selander@ericsson.com>, Malisa Vucinic <Malisa.Vucinic@inria.fr>, =?UTF-8?Q?Ari_Ker=c3=a4nen?= <ari.keranen@ericsson.com>, Stephen Farrell <stephen.farrell@cs.tcd.ie>, kathleen moriarty ietf <kathleen.moriarty.ietf@gmail.com>
Organization: vanderstok consultancy
Reply-To: consultancy@vanderstok.org
Mail-Reply-To: consultancy@vanderstok.org
In-Reply-To: <8009.1517005007@dooku.sandelman.ca>
References: <ec0dc702a4cb72aeba948c2284736f82@xs4all.nl> <499916683ba341268848f31b46ce2e3f@XCH-ALN-010.cisco.com> <22011.1511821577@obiwan.sandelman.ca> <592c2101709744d2bacb767f43677f74@XCH-ALN-010.cisco.com> <27899.1511915851@obiwan.sandelman.ca> <c5ebf5dda3194115afb4811b3d0edaf2@XCH-ALN-010.cisco.com> <10876.1512585577@dooku.sandelman.ca> <abd29309a1544feebd5d8373ce988672@XCH-ALN-010.cisco.com> <5a81cee67661e86e20c6460d6454f5c0@xs4all.nl> <12182.1516949658@obiwan.sandelman.ca> <e51d9d71-42df-dff8-74c4-1570da7d2d83@cisco.com> <8009.1517005007@dooku.sandelman.ca>
Message-ID: <bdf0abb5528ef257679616cf3416f288@xs4all.nl>
X-Sender: stokcons@xs4all.nl
User-Agent: XS4ALL Webmail
X-CMAE-Envelope: MS4wfAPHL5Z4KcpjdMrHDVcovZcvx81y5N9b+zNBTVVeh7B+OOTyE3/GlM4yVip8ljsXBwI/aKOLDTvTS/7bAh/K4S9nYvJgoAAt+fUCeOOHvLzjhsDbgPYV qs1Qg0LcQfb14U2VbctYDMI5PlIvoNAaCtxnxBaM7AlSiMvBlqZgqyB6j+joq9dhuUMgwOQYejhSne3tMZ+0eM2KGUz1NbnzS26wgf5QoeR9KKMM6cIh9S8d 2qPIfx/xnX/5PBW2NbrJnYTg+AlEcBK2+S3U4ZMt8Hw2//voLaKVnlBYksrDbYeYkYUOSCYWRfdaYolebQYWM4mLvcXMa2QM/iXBK+A7O61Ew7Er/LLHPJwv skNVvAp4mZv3ktG54Js0S/stM5f8d2ICuMeksVDu2LxUh2+k5vT/BAdKFwsgLN2xgL1lUso6ZLthPZLqVq6chpP92xfZMq6i9bYCkdKYg1cIaK1OlfT4ePI3 S+12PvLHhzXS4ooz1HxBumm6deZr8VTfi/VChOzNnJQ6ZDhrjR1qBy9Dd4HuMq04RK+1o5LdkoFcoqP4s3muQvNZvMMUpmJqRjOC7uG5XFs8qpJI226wC4Am FcV/CkGIDdb8hSh2D3JL1yMNuCwsjKWo/EYKgXF37J6aEctqSSpEtIl4M4P+E+dhvpWxqf9KiGgfucaNID4/FmPiGyZX8VO0QWx7CkmJ2U4Vg7pC0QTkMzus iY4BmEoSD4H7+A0gx1Y4ZMzyIYY+whrR8d52/4QNkpWXt0eBd6PXAI405IMjBmhRPHqEHFAeUKArZxhBW02tWv4Jib3gcVYGbvj0cJWNKngdMr32l3wFJeAD POIStlcoCAv85Ova7O1CreQ4Wh1Ptx+0yCXW3jJX
Archived-At: <https://mailarchive.ietf.org/arch/msg/6tisch-security/SSajLXQKz2V1kz5RGWZu6dS9ukQ>
X-Mailman-Approved-At: Mon, 29 Jan 2018 07:10:14 -0800
Subject: Re: [6tisch-security] bar bof at IETF101, Re: enrollment roadmap
X-BeenThere: 6tisch-security@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Extended Design Team for 6TiSCH security architecture <6tisch-security.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/6tisch-security>, <mailto:6tisch-security-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/6tisch-security/>
List-Post: <mailto:6tisch-security@ietf.org>
List-Help: <mailto:6tisch-security-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/6tisch-security>, <mailto:6tisch-security-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Jan 2018 08:50:07 -0000

bar-boffin is a bit too much for me.
Prefer wine to beer, but can bring my own bottle (glass).

Is the suggestion to connect all this to IoT-T2TRG keying cycles work?

Peter

Michael Richardson schreef op 2018-01-26 23:16:
> Eliot Lear <lear@cisco.com> wrote:
>     >    That's a nice working doc.  I've been thinking along the same 
> lines.
>     > In particular, what I really like about your diagram, chaotic as 
> may
>     > make the world appear, is that while we have umpteen processes 
> for
>     > registration, at the end of the day, we can probably boil down to
>     > precisely two gazoutas, assuming I'm understanding OSCORE 
> correctly.
>     > That in itself is worth capturing.
> 
> Yes-ish.  Since the OSCORE vs DTLS is a session keying issue, that 
> difference
> is not seen beyond the JRC.  What is seen from pledge<--JRC-->MASA is 
> the
> voucher, which may be {CBOR,JSON} X {CMS-signed,COSE-signed}
> 
>     >    I do not yet believe we have all the necessary flows in focus. 
>  I
>     > have some thoughts on that I will share separately in due course, 
> but
>     > perhaps this is worth a bar bof at the IETF?
> 
> Yes. A real bar bof, where we just find chairs and beer and chat, or 
> one of
> these new-fangled IESG/AD mediated ones where we can get meetecho, but 
> no beer.
> 
> I'm trying to remember what the bar at the Metropole looked like, and 
> I'm not
> able to.  Maybe I never found it in the maze?
> 
> Or maybe we can just use that sign-up-for-this-room bit.
> I think that they are doing that again.  Yes, lets do that.
> I wonder what happens if we try to order pizza or schwarama in :-)
> 
> Would someone like to reply to this and coordinate a time among those 
> who
> want to participate?
> 
> Probably, at this point, the CC list is a bad idea since not everyone 
> is
> interested.  Noting the Reply-To set, which also makes this suitably 
> public.
> (I realize not everyone is on the 6tisch-security list, but you could 
> be)